Automad Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-40111 · ADVISORY
• drive.google.com/file/d/10BVQKYo2H1-Nx3FOGteL2xww4lbZ3xlS/view · WEB
• marcantondahmen/automad · PACKAGE
• w3bn00b3r/Stored-Cross-Site-Scripting-XSS---Automad-2.0.0-alpha.4 · WEB
• w3bn00b3r/Stored-Cross-Site-Scripting-XSS---Automad-2.0.0-alpha.4 · Exploit

automad/automad のその他の脆弱性

• CVE-2026-45332高 7.5Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Access Control vulnerabi…
• CVE-2024-40400高 8.8An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a craft…
• CVE-2023-7038中 6.5A vulnerability was found in automad up to 1.10.9. It has been rated as problematic. This issue affects some unknown processing of the file …
• CVE-2023-7037高 8.8A vulnerability was found in automad up to 1.10.9. It has been declared as critical. This vulnerability affects the function import of the f…
• CVE-2023-7036中 5.4A vulnerability was found in automad up to 1.10.9. It has been classified as problematic. This affects the function upload of the file FileC…